Files
Codewhale/crates/tui/Cargo.toml
T
CodeWhale BotandClaude Opus 5.5 4cf2d2cfff feat: integrate the verified 0.10.3 combined Engine batch [skip ci]
Lands the 0.10.3 program work that two Codex sessions left uncommitted on
canonical main (chats 01a176ff "Review latest MCP updates" / 01a176e0 "DSH
plugin compatibility"), on top of contributor PR #7086, which merged as itself (5c3d461d8a)
immediately before this commit. The pieces share compiler inputs
(the crate-split moves touch most of them), so they land as one verified
tree rather than as intermediate commits that would not build.

Contents:
- Crate split slices: `codewhale-net`, `codewhale-notify` and
  `codewhale-sandbox` crates; runtime config, config persistence, oauth,
  settings, catalog cache and Codex model roster moved from tui to runtime;
  hooks, extension host config and instruction budget to config; callers
  rewired, re-export facades removed (CW-6129).
- Follow-up repairs to #7086 instruction budgets (per-scope budgets,
  canonical source labels, `instruction_assembly` session snapshot).
- MCP: official SDK 2.4 host backend by default with `server/discover`
  and legacy fallback, metadata/output schema handling, OAuth issuer
  binding, Engine/CU server modernization (CW-6713, CW-7543, CW-7544,
  CW-7546).
- DSH plugin compatibility from the authorized exception lane `26ba80b06a`:
  shared compatibility table, native command lifecycle, reviewed imports,
  Native-only filesystem sandbox (CW-7054).
- Computer Use plugin-only cutover: vendored bundle removed, marketplace
  install from the independent release (CW-6732).
- Image-heavy sessions: 256 KiB read budget, outbound image omission with
  receipts, one smaller retry on HTTP 413 (CW-7550).
- Typed review operation (`core/engine/review.rs`, `runtime_api/review.rs`)
  used by Platform structured reviews.
- Receipt-owned Unix uninstall (Refs #7091).
- Steering (CW-7552) and Linux Shift+Enter (CW-7551, Refs #7093) source
  changes; runtime/manual proof still pending.

Fixes made during takeover verification:
- MCP: Rust now admits the legacy handshake whenever the SDK classifies the
  discovery probe as legacy (any JSON-RPC error, or a result without the
  modern supported version); before, servers answering the probe with a
  result were refused after it.
- MCP: an admitted legacy handshake reports initialize's own failure (e.g.
  401) instead of the probe's -32601.
- MCP: OAuth reactive refresh covers the side-effect-free probe.
- MCP: broker launch failures keep their diagnostic (missing command).
- Tool images must decode before delivery (truncated PNG was accepted).
- THIRD_PARTY_NOTICES lists MCP SDK 2.4.0 and DSH 0.2.1-rc.2 excerpts.
- Changelog entries for MCP, DSH, Computer Use and image validation.
- `#[cfg(test)]` on three test-only items; `cargo fmt --all`; tests updated
  to post-cutover behavior (no built-in CU, `$schema` manifests, canonical
  paths, lazy CU tools, SyncSession resets instruction assembly).

Verified on this exact tree (macOS, source sha 4353faf1 before changelog
edits; changelog/generated-doc edits only after):
- cargo check --workspace --all-targets --locked: exit 0, no warnings
- codewhale-config 806 passed; codewhale-runtime 850 passed;
  codewhale-net 52 passed; codewhale-notify 31 passed; codewhale-cli 501
  passed (nextest, 0 failed)
- codewhale-tui lib: 14515 passed, 0 failed, 21 skipped
- extension host npm test: 420 tests, 413 passed, 0 failed, 7 skipped
- web check-facts OK
Linux x86_64 (Boat VM, same source before the #7097 fold-in):
cargo check --workspace --all-targets --locked exit 0; codewhale-config
808, codewhale-runtime 849, codewhale-net 52, codewhale-notify 31,
codewhale-sandbox 100, codewhale-cli 501 passed, 0 failed. The tui lib
test binary was still compiling on the 16 GB VM at commit time.
#7097 (main) was three-way merged into approval_log.rs and clipboard.rs;
re-check after the fold-in: workspace check exit 0; tui approval_log,
clipboard, session_export, file_mention, pet_watch 213 passed.
Not run: hosted CI, clippy -D warnings, release packaging, live provider
or real MCP servers beyond local fixtures, Deepin run for #7093.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-26 23:28:43 -07:00

248 lines
11 KiB
TOML

[package]
name = "codewhale-tui"
version.workspace = true
edition.workspace = true
rust-version.workspace = true
license.workspace = true
repository.workspace = true
description = "Terminal UI for open-source and open-weight coding models"
autobins = false
# crates.io rejects packages over 10 MiB compressed, and this crate's test
# sources, extension-host build inputs and dev-only assets push the package
# past that cap (0.10.1's upload was refused with HTTP 413 at 11.9 MiB). None
# of these are compiled, embedded or read by `cargo build` / `cargo install`;
# the repository keeps them for CI, local test runs and the extension-host
# build, and only the published package omits them.
exclude = [
"tests/**",
"src/**/tests.rs",
"src/**/tests/**",
"src/**/*_tests.rs",
"src/**/test_cases_*.rs",
"src/**/*_legacy.rs",
"src/**/*test_support.rs",
"src/**/*acceptance.rs",
"src/conformance.rs",
"src/conformance/**",
"src/lib/terminal_mode_test_cases_*.rs",
"src/llm_client/mock.rs",
"src/plugins/test_fixture.rs",
"src/skills/catalog_matrix.rs",
"src/compaction/survival_contract.rs",
"src/compaction/SURVIVAL_CONTRACT.md",
"src/compaction/validate_survival_contract.mjs",
"src/compaction/fixtures/**",
"src/commands/contract/config_policy_baseline.rs",
"src/commands/contract/fixtures/**",
"src/commands/fixtures/diagnostics/**",
"src/commands/fixtures/*_baseline.md",
"src/commands/fixtures/*_baseline.json",
"src/pricing/default_coverage_unpriced.json",
"src/runtime_web/app.test.mjs",
"src/runtime_web/orca-evidence.html",
"src/tui/golden_harness.rs",
"src/tui/goldens/**",
"src/tui/pet_watch/worker.rs",
"src/tui/widgets/pending_input_preview/legacy_fixture.rs",
"assets/mark-*.png",
"assets/skills-catalog-matrix.json",
"extension-host/test/**",
"extension-host/node_modules/**",
"extension-host/build.mjs",
"extension-host/compile-host.mjs",
"extension-host/package-lock.json",
"extension-host/scripts/**",
"extension-host/src/**/*.ts",
"extension-host/src/dsh/dsh-tools-compat.js",
"extension-host/dist/agent-presets.mjs",
"extension-host/dist/avatars.mjs",
"extension-host/dist/builtin-modules.json",
"extension-host/dist/protocol.mjs",
"extension-host/dist/rpc.mjs",
"extension-host/dist/shell-hooks.mjs",
"extension-host/dist/skills.mjs",
"extension-host/dist/stock-adapters.mjs",
]
[lints]
workspace = true
[features]
default = []
long-running-tests = []
# Accepted compatibility feature names. Allocators belong exclusively to the
# canonical codewhale-cli executable; these library aliases have no effect.
mimalloc-allocator = []
rusty-alloc = []
[lib]
name = "codewhale_tui"
path = "src/lib.rs"
doctest = false
[dependencies]
# Independent terminal kit, pinned and vendored for reproducible binary builds.
codewhale-ratatui = { path = "../../vendor/codewhale-ratatui", version = "0.1.2" }
codewhale-sanitize = { path = "../sanitize", version = "0.10.2" }
codewhale-memory = { path = "../memory", version = "0.10.2" }
ahash = "0.8"
anyhow.workspace = true
codewhale-agent = { path = "../agent", version = "0.10.2" }
codewhale-agent-contract = { path = "../agent-contract", version = "0.10.2" }
codewhale-app-server = { path = "../app-server", version = "0.10.2" }
codewhale-config = { path = "../config", version = "0.10.2" }
codewhale-cloud-facts = { path = "../cloud-facts", version = "0.10.2" }
codewhale-command-contract = { path = "../command-contract", version = "0.10.2" }
codewhale-commands = { path = "../commands", version = "0.10.2" }
codewhale-core = { path = "../core", version = "0.10.2" }
codewhale-execpolicy = { path = "../execpolicy", version = "0.10.2" }
codewhale-hooks = { path = "../hooks", version = "0.10.2" }
codewhale-lane = { path = "../lane", version = "0.10.2" }
codewhale-mcp = { path = "../mcp", version = "0.10.2" }
codewhale-models = { path = "../models", version = "0.10.2" }
codewhale-net = { path = "../net", version = "0.10.2" }
codewhale-notify = { path = "../notify", version = "0.10.2" }
codewhale-palette = { path = "../palette", version = "0.10.2" }
codewhale-paths = { path = "../paths", version = "0.10.2" }
codewhale-protocol = { path = "../protocol", version = "0.10.2" }
codewhale-release = { path = "../release", version = "0.10.2" }
codewhale-runtime = { path = "../runtime", version = "0.10.2" }
codewhale-sandbox = { path = "../sandbox", version = "0.10.2" }
codewhale-secrets = { path = "../secrets", version = "0.10.2" }
codewhale-telemetry = { path = "../telemetry", version = "0.10.2" }
codewhale-tools = { path = "../tools", version = "0.10.2" }
codewhale-workflow = { path = "../workflow", version = "0.10.2" }
codewhale-workflow-js = { path = "../workflow-js", version = "0.10.2" }
async-stream = "0.3.6"
async-trait.workspace = true
base64 = "0.23.1"
axum.workspace = true
clap.workspace = true
colored = "3.0.0"
crossterm = "0.29"
dotenvy = "0.15.7"
encoding_rs.workspace = true
fd-lock = "4.0.4"
dirs.workspace = true
futures-util = "0.3.31"
oauth2 = { version = "5", default-features = false }
# No ratatui-core pin: ColorCompatBackend answers `get_cursor_position()`
# from tracked state (ratatui#2640's recommended workaround), so the CPR query
# inside `Terminal::clear()` no longer races the input loop. See
# `tui/color_compat.rs`.
ratatui = { version = "=0.30.2", features = ["unstable-rendered-line-info"] }
regex = "1.11"
reqwest = { workspace = true, features = ["blocking", "stream", "form", "http2"] }
rquickjs.workspace = true
rmcp = { version = "3.7.0", default-features = false, features = ["auth", "client", "server", "transport-io"] }
rustls.workspace = true
qrcode = { version = "0.14", default-features = false }
similar = { version = "3", features = ["unicode"] }
ansi-to-tui = { version = "8.0.1", default-features = false }
# The renderer uses embedded syntax/theme dumps, not external YAML/plist loaders.
# `regex-onig` (syntect's reference engine) instead of `regex-fancy`: compiled
# fancy-regex programs for the default syntaxes cost tens of MB of process-lifetime
# heap once a few languages have been highlighted; Oniguruma holds the same
# grammars in single-digit MB. The TUI already builds C (bundled SQLite, QuickJS).
syntect = { version = "5.2", default-features = false, features = ["default-syntaxes", "default-themes", "regex-onig"] }
serde.workspace = true
serde_json = { workspace = true, features = ["preserve_order", "raw_value"] }
yaml-rust2 = { workspace = true }
shellexpand = "3"
# Grammar-exact Rust parsing for the post-edit syntax gate (#6204). `syn` is
# already in the lockfile as a proc-macro build dependency; this reuses that
# same version rather than vendoring a second parser (#6151). `span-locations`
# is what turns a parse failure into the `line:column` the model needs — the
# feature is inert without it.
syn = { version = "3.0.3", default-features = false, features = ["full", "parsing"] }
proc-macro2 = { version = "1.0.107", features = ["span-locations"] }
toml.workspace = true
toml_edit.workspace = true
tokio.workspace = true
tokio-util = { version = "0.7.16", features = ["io"] }
unicode-width = "0.2"
unicode-segmentation = "1.12"
unicode-normalization = "0.1"
urlencoding = "2.1"
# Structcopy uses the URL parser directly so its portable closure needs no HTTP client.
url = "2.5"
uuid.workspace = true
chrono.workspace = true
tempfile.workspace = true
thiserror.workspace = true
tracing.workspace = true
tracing-subscriber.workspace = true
tower-http.workspace = true
wait-timeout = "0.2"
webbrowser = "1.0"
shlex = "2.0.1"
globset = "0.4"
ignore = "0.4"
image = { version = "0.25", default-features = false, features = ["png", "jpeg", "webp", "gif"] }
# Already a regular dependency of codewhale-workflow-js (so already linked into
# this binary); the extension host validates tool input against the schema the
# plugin registered with it.
jsonschema.workspace = true
htmd = "0.5.4"
# lru >= 0.18.2 fixes RUSTSEC-2026-0253 (panic-unsafe `pop()`).
lru = "0.18"
parking_lot = "0.12"
tar = "0.4"
# Vendored static liblzma keeps the full-fidelity session archive export
# (`session_export`) hermetic on every release target; no system xz headers.
# liblzma is the maintained, API-compatible continuation of xz2.
liblzma = { version = "0.4", features = ["static"] }
flate2 = "1.1"
sha2.workspace = true
# Reuse the locked cryptographic implementation for exact-call user decisions.
ring = "0.17"
semver.workspace = true
codewhale-localization = { path = "../localization", version = "0.10.2" }
shell-words = "1.1.1"
[build-dependencies]
codewhale-build-support = { path = "../build-support", version = "0.10.2" }
[dev-dependencies]
codewhale-notify = { path = "../notify", version = "0.10.2", features = ["test-thread-scoped-state"] }
codewhale-config = { path = "../config", version = "0.10.2", features = ["schema", "test-support"] }
codewhale-agent-contract = { path = "../agent-contract", version = "0.10.2", features = [
"test-support",
] }
codewhale-runtime = { path = "../runtime", version = "0.10.2", features = [
"test-support",
"test-thread-scoped-state",
] }
codewhale-sandbox = { path = "../sandbox", version = "0.10.2", features = ["test-support"] }
codewhale-models = { path = "../models", version = "0.10.2", features = [
"test-support",
] }
cucumber = "0.23.0"
wiremock = "0.6"
tiny_http = "0.12"
pretty_assertions = "1.4"
rio-vt = "0.5.1"
rusqlite.workspace = true
schemars = { version = "1.2.1", features = ["derive", "preserve_order"] }
tokio-tungstenite = "0.30"
[target.'cfg(unix)'.dependencies]
libc = "0.2"
[target.'cfg(windows)'.dependencies]
windows-sys = { version = "0.61.2", features = ["Wdk_Storage_FileSystem", "Win32_System_IO", "Win32_Foundation", "Win32_Security", "Win32_Security_Authorization", "Win32_Security_Isolation", "Win32_Storage_FileSystem", "Win32_System_LibraryLoader", "Win32_System_Pipes", "Win32_System_Threading", "Win32_System_SystemServices", "Win32_System_WindowsProgramming"] }
[target.'cfg(any(target_os = "macos", target_os = "windows", all(target_os = "linux", not(target_env = "ohos"))))'.dependencies]
arboard = { version = "3.4", features = ["wayland-data-control"] }
[target.'cfg(not(target_env = "ohos"))'.dependencies]
portable-pty = "0.9"
[target.'cfg(target_os = "macos")'.dependencies]
objc2 = "0.6.3"
objc2-foundation = { version = "0.3.2", default-features = false, features = ["std", "NSArray", "NSDictionary", "NSError", "NSObject", "NSString", "NSURL"] }
[target.'cfg(target_os = "windows")'.dependencies]
windows = { version = "0.62", features = ["Win32_Foundation", "Win32_Security", "Win32_Security_Authorization", "Win32_Storage_FileSystem", "Win32_System_Console", "Win32_System_Diagnostics_ToolHelp", "Win32_System_Environment", "Win32_System_JobObjects", "Win32_System_Registry", "Win32_System_Threading", "Win32_UI_WindowsAndMessaging"] }